Researchers warn of Safari zero-day exploit targeting Apple iPhones

Apple: Apple Inc. is the technology company responsible for the iPhone, iOS operating system, and integrated software services. It is central to the reported incident as its devices and browser are the targets of an active zero-day exploit chain affecting Safari on iPhones. Recent researcher disclosures emphasize the importance of timely iOS security updates to mitigate such threats. Safari: Safari is Apple's web browser and the primary interface for WebKit on iOS devices. The news describes it as the entry point for a sophisticated exploit that begins with visiting a malicious webpage and escalates to extract private keys, seed phrases, and Keychain data. Security researchers have highlighted this vector in urgent public warnings issued within the past week. Exploitation Vector: The attack initiates when a user visits a malicious webpage in Safari, leveraging memory corruption in WebKit and JavaScriptCore to bypass security features and reach kernel-level access. Mitigation Emphasis: Researchers from security firms and industry executives are actively urging iPhone users to apply the latest iOS updates immediately to address the disclosed vulnerabilities. Crypto-Specific Risk: The exploit specifically targets cryptocurrency-related data stored on the device, including wallet private keys and recovery phrases, bypassing typical app-level protections.